[Clip] Root lock out

[Julian Onions]

Anyone have any ideas on this one that we've just tripped over.
 
After installing a clip system, we age the password of root to force it
to be changed
chage -d 0 root
However when attempting to su to root now, you are forced to change your
password, as expected.
However this fails because sysadm_su_t is not allowed access to
crack_db_t - also doesn't have access to shadow_t and a number of others
things it needs.
I was wondering therefore how to get around this. 
Also - where does the transition from sysadm_su_t to sysadm_t happen?
 
Thanks
Julian
 
DISCLAIMER: Privileged or confidential information may be contained in
this message or within any files transmitted with it.  If you are not
the intended recipient, kindly destroy the message and notify the sender
by reply email.  Opinions, conclusions and other information in this
message that do not relate to the official business of Nexor are neither
given nor endorsed by it.

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/clip/attachments/20090506/4c94a3e0/attachment.html